IT Engineer

IT Engineer

About the company

Hi, we're Ondo Finance. Our mission is to provide institutional-grade, blockchain-enabled investment products and services. We have both a technology arm that develops decentralized finance technology, and an asset management arm that creates and manages tokenized funds. We were the first company to tokenize exposure to US Treasuries, and have since expanded into several other assets. We are also focused on incubating protocols that can support both tokenized real-world assets and traditional crypto.

Founded by folks from Goldman Sachs Digital Assets Team, we're backed by some of the best investors in the world including Founders Fund, Coinbase Ventures, Pantera Capital, Tiger Global, and more. We are currently the leaders in the space in terms of AUM and are well capitalized to continue growing the firm. We're fully remote, with team members across the U.S.

About the role

We are seeking a motivated, systems-oriented IT Engineer to join our Corporate IT team. This role combines hands-on IT operations and Tier 1-2 support with ownership of identity, access, endpoint management, and employee lifecycle workflows.

You will work closely with the IT Operations Engineer and Security team to operate and continuously improve a modern, SaaS-first, highly automated IT environment. This is a junior but high-impact role designed for someone who wants to grow into identity-driven, automation-focused IT.

Responsibilities

Identity, Access & SaaS Operations

• Support day-to-day administration of IAM platforms such as Okta (or similar IdPs), including user lifecycle workflows, access provisioning, group management, and MFA.
• Assist with SSO and SCIM integrations between IAM systems and SaaS platforms such as Google Workspace, Slack, Notion, and other internal tools.
• Help enforce least-privilege access principles and support periodic access reviews and audits.
• Execute secure and timely access provisioning and deprovisioning aligned with documented lifecycle processes.

Endpoint & Device Management

• Support macOS endpoint management using Addigy, Iru, or similar platforms.
• Assist with device enrollment, compliance monitoring, troubleshooting, and lifecycle workflows.
• Coordinate device preparation, shipping, replacements, and secure device recovery for offboarding employees.
• Help maintain endpoint security standards and configuration baselines.

Employee Lifecycle & Automation

• Execute and coordinate end-to-end onboarding and offboarding processes, including:
  • Account provisioning and access configuration
  • Device setup and logistics
  • Role-based access enforcement
  • Secure deactivation and asset recovery
• Assist in building and maintaining low-code / no-code automations (e.g., Okta Workflows) to reduce manual effort and increase reliability.
• Ensure lifecycle processes are documented, repeatable, and auditable.
• Identify opportunities to improve lifecycle efficiency and reduce operational risk.

Tier 1 & 2 IT Support

• Provide day-to-day IT support across identity, SaaS applications, access issues, and macOS endpoints.
• Serve as an escalation point for more complex access, integration, or device issues.
• Perform structured troubleshooting and root-cause analysis rather than applying temporary fixes.
• Identify recurring operational problems and contribute to durable, system-level improvements.

Vendor Lifecycle & IT Operations

• Support vendor onboarding, evaluation, and renewals.
• Assist with SaaS access reviews and vendor offboarding.
• Help maintain visibility into vendor usage, contracts, and lifecycle status.
• Contribute to improving procurement and asset tracking processes.

Requirements

• 2-3 years of experience in IT support, IT operations, or systems-focused roles.
• Experience providing Tier 1-2 IT support in a SaaS-heavy environment.
• Solid understanding of identity and access management fundamentals, including SSO, SCIM, MFA, and RBAC.
• Hands-on experience with IAM platforms such as Okta, Azure AD, or similar.
• Experience supporting Google Workspace or Microsoft 365 environments.
• Experience supporting macOS environments or strong endpoint fundamentals.
• Comfort working in a terminal / CLI environment appropriate to experience level.
• Ability to read and modify scripts written in Python, Bash, or PowerShell.
• Strong written communication and documentation skills.
• Ability to work independently in a fully remote environment.

Backgrounds in Microsoft-centric environments (O365, Azure AD, Intune) are welcome, provided there is comfort learning Okta and SaaS-first tooling.

Nice to haves

• Experience with endpoint management platforms such as Addigy, JAMF, Iru, or Intune.
• Experience building or maintaining low-code / no-code automations (e.g., Okta Workflows).
• Exposure to SaaS-first, identity-driven IT architectures.
• Familiarity with vendor management, procurement workflows, or asset lifecycle tracking.
• Interest in identity governance, security-adjacent work, or enterprise automation.
• Relevant certifications (Okta certifications, CompTIA A+/Network+/Security+, Google Workspace, Microsoft certifications).

What we offer

• Competitive compensation including salary and/or equity (according to your preferences) - we're well-funded and believe that great talent deserves great compensation
• Full benefits (medical, vision, and dental) and flexible vacation policy (PTO)
• Small remote-first team across many countries - you'll be an early team member helping shape our vision, culture, and design practices
• A+ colleagues - our team includes alumni from: Goldman Sachs, Blackrock, Two Sigma, Bridgewater, SpaceX, AWS, Meta, Google, Pinterest, McKinsey, Circle, Uniswap, Phantom
• Best-in-class investors - we are proud to be backed by leading crypto experts and VCs, including Pantera Capital, Founders Fund and Coinbase Ventures

When applying, mention the word CANDYSHOP to show you read the job post completely.